This 2.3 release fixes an (important) security issue - the security rating for the CVE is 7.5/10. All issues fixed in this release are subject to public disclosure on June 1, 2022. Please make sure to update your systems in time.
We would like to thank Giang. Võ Quý from VNG Corporation for responsibly disclosing and assisting with the fixing this security issue.
HTML5 client
- fix: Backport refactor: Remove the endpoint html5/useragent #14896 improved security - expect CVE
- chore: npm update dependencies #14895 improved security
- chore: Pulled the latest 2.3 HTML5 locales from Transifex #14898
bbb-etherpad
- Updated etherpad-lite to 1.8.17 improved security
bbb-webrtc-sfu
- Updated to 2.6.14
Release name
In case an administrator does not want to update to the latest bionic-230 version. Use as substitute to the -v argument in bbb-install.sh command
bionic-230-2.3.19
We still recommend using -v bionic-230.